Sr Security Engineer Enterprise Security

## About the role Turo is searching for a highly motivated and versatile Sr. Security Engineer to spearhead our efforts in securing enterprise systems and data through the design, implementation, and continuous improvement of a comprehensive security framework. This role will focus heavily on building out Zero Trust principles across the organization, ensuring the integrity of our systems and protecting against emerging threats. Key areas of focus include Advanced Email Security, Data Loss Prevention (DLP), Insider Threat prevention, Endpoint Security, Identity and Access Governance, Security Awareness Training, Configuration management and Infrastructure as Code, Incident Response (SOAR automation), Regulatory Compliance and SaaS Security Posture. The successful candidate will be an expert in these domains and have a proactive mindset for staying ahead of potential threats and regulatory requirements. ## What You'll Do - Lead the implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models. - Develop and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks. - Deploy and maintain Data Loss Prevention (DLP) technologies to prevent unauthorized access or exfiltration of sensitive data. - Implement and enhance Insider Threat prevention programs to mitigate risks from internal actors. - Manage and optimize Endpoint Security solutions to safeguard all corporate devices. - Oversee Identity and Access Governance solutions to enforce secure and efficient access control policies. - Ensure ongoing compliance with SOX and SOC 2 standards, performing regular audits and gap assessments. - Deliver Security Awareness Training programs to educate employees on the latest security threats and best practices. - Advocate for and deploy Infrastructure as Code to automate security configurations and infrastructure, specifically using Terraform. - Lead Incident Response efforts for enterprise security, developing automation playbooks and conducting root cause analysis to mitigate security incidents swiftly. - Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated. - Collaborate with cross-functional teams to integrate security into all stages of the Software Development Life Cycle (SDLC). ## Your profile - Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. - 5+ years of experience in enterprise security, with a focus on Zero Trust, Advanced Email Security, DLP, and Endpoint Security. - Proven experience in Zero Trust architecture design and implementation. - Strong knowledge of identity governance frameworks, SaaS security, and compliance requirements like SOX and SOC 2. - Experience with Incident Response and advanced threat detection methodologies. - Proficiency in scripting and automating security processes using Python, PowerShell, or similar languages. - Experience with configuration management and infrastructure as code tools (e.g., Ansible, Terraform). - Experience working on cloud infrastructure, especially AWS and its Security services suite. - Solid understanding or experience working in containerized environments and familiarity with GitOps flow. - The proven ability to work independently with minimal supervision and ability to perform and oversee complex tasks and prioritize multiple tasks based on overall strategic goals. - Real passion for technology and desire to build tooling from ground-up and to tackle complex problems with creative solutions. - The capability to interface with multiple levels of the organization and to serve as an influencer and a team player. - Strong presentation, facilitation, and written/verbal communication skills. - Industry certifications such as CISSP, CISM, CEH, or GIAC are a plus. ## What we offer - Competitive salary, equity, benefits, and perks for all full-time employees. - Employer-paid medical, dental, and vision insurance (Country specific). - Retirement employer match. - $2,000 Learning & Development stipend to invest in your professional development. - $1,000 USD Turo host matching and $1,500 USD vehicle reimbursement program. - $100 USD Monthly Turo travel credit. - Cell phone, internet and Fringe benefit stipend. - Paid time off to relax and recharge. - Paid holidays, volunteer time off, and parental leave. - For those who are in the office full-time or hybrid we have weekly in-office lunch, office snacks, and fun activities. - Annual Turbo Week (week-long, company-wide conference). ## About the company As the world's largest car sharing marketplace, Turo is growing fast and hiring talent in the US, Canada, the UK, France, and Australia! Our driven, down-to-earth team empowers you to push yourself, make a huge impact, and accelerate your career growth. We are committed to building a diverse team. If you are from a background that's underrepresented in tech, we'd love to meet you. Aside from an award winning work environment and the opportunity to be part of the world's largest car sharing marketplace, we are also growing the team quickly - join us! Even if you don't meet every qualification, we are looking for people with enthusiasm for what we do and we will consider you for this and other possibilities. Turo is an Equal Opportunity Employer and a participant in the U.S. Federal E-Verify program. Women, minorities, individua